Security permissions

AALAAL Member Posts: 8
edited 2006-07-17 in Navision Attain
I am working on project that has a very simple requirement. I want to allow a User to assign security to other users. The drawback is due to a guideleine that the user may not have permissions to the tables that they need to assign to other users.

I have tried several variation of how to get around this, but still have not been able to resolve this issue. Has anyone attempted this in the Past, and can you please help me with ideas on resolving this problem?

Thanks to everyone who can provide assitance here.

Comments

  • DenSterDenSter Member Posts: 8,304
    I don't think you need actual access to tables to be able to assign permission to the table to another user. Of course, if you have permission to assign permission, it is easy to assign yourself permissions isn't it :mrgreen:
  • Marije_BrummelMarije_Brummel Member, Moderators Design Patterns Posts: 4,262
    In my dutch database there is a role BEVEILIGNG, my guess is the english version should be something like SECURITY.

    Have you tried this role?
  • DenSterDenSter Member Posts: 8,304
    LOL I even went into my database before I replied before to look for that role, I can't believe I forgot to mention it :mrgreen:

    There is a standard role called SECURITY that seems to have all permissions that you need to assign permissions. Let us know if you need us to tell you those permissions, there's just a small number of them.
  • kinekine Member Posts: 12,562
    Exactly, role SECURITY is on of the system roles with special meanings. With this role, the user is able to assign other users into roles. But this permission do not permit the user to assign role which is not member himself. It means, if I have just SECURITY, ALL, and role XXX, I can just assign role SECURITY,ALL and XXX to another user...
    Kamil Sacek
    MVP - Dynamics NAV
    My BLOG
    NAVERTICA a.s.
  • AALAAL Member Posts: 8
    That is the same Issue that I had run into. Even Assigning a User the Security Role, still limits the user to only assigning roles to Security, All and the only roles that they are assigned. Does anyone have any Ideas on a Work around?

    Any Suggestions, Ideas, or Comments would be greatley appreciated. I'm Confident that this is the best Site for these.

    Thanx Again,

    Alan
  • DenSterDenSter Member Posts: 8,304
    I would say that unless you want to limit the roles that the 'security giver person' the you use the SECURITY role in addition to the other roles, and otherwise you give the admin ALL. If you can't trust the sys admin, who can you trust?
Sign In or Register to comment.